CVE-2026-34513Disclosure(aiohttp / aiohttp)

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch aiohttp aiohttp systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an unbounded DNS cache could result in excessive memory usage possibly resulting in a DoS situation. This issue has been patched in version 3.13.4.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-770

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • aiohttp

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
Products
aiohttp

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-04-02: 2Patch / Workaround · 2026-04-02: 1Technical Details · 2026-04-02: 204-02
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-34513 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an unbounded DNS cache could result in excessive memory usage… https://www.cve.org/CVERecord?id=CVE-2026-34513

    Post summary

    The text announces CVE-2026-34513 in aiohttp, noting an unbounded DNS cache that can cause memory exhaustion. No PoC, exploit, or patch information is provided.

    00010174
    56.9K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-34513 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an unbounded DNS cache could result in excessive memory usage… https://www.cve.org/CVERecord?id=CVE-2026-34513 ----- Traducción: CVE-2026-34513 AIO… http://infoflow.cloud`

    Post summary

    The post announces CVE‑2026‑34513 for the AIOHTTP Python framework, briefly describing an unbounded DNS cache that can cause memory exhaustion and indicating that the issue was addressed in version 3.13.4.

    0000034
    65 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appaiohttpaiohttp---

Explore more